{"id":325,"date":"2020-03-23T09:41:06","date_gmt":"2020-03-23T07:41:06","guid":{"rendered":"https:\/\/vpn.univ-fcomte.fr\/?p=325"},"modified":"2020-03-23T09:41:06","modified_gmt":"2020-03-23T07:41:06","slug":"linux-probleme-de-connexion-chaine-de-certification","status":"publish","type":"post","link":"https:\/\/vpn.univ-fcomte.fr\/?p=325","title":{"rendered":"Linux : probl\u00e8me de connexion (cha\u00eene de certification)"},"content":{"rendered":"\n

Si votre syst\u00e8me (ubuntu 18.xx par exmple) n’est pas bien \u00e0 jour, il est possible que la cha\u00eene de certification qu’il embarque ne soit plus valide. Cela est visible sur certains serveurs Web en https certifi\u00e9s par Digicert, mais du coup aussi sur les serveur VPN vpn20-1 ou vpn20-2 qui utilise \u00e9galement ce type de certificat et de cha\u00eene de certification.<\/p>\n\n\n\n

Le log (merci Cl\u00e9ment) :<\/p>\n\n\n\n

Mar 23\u00a007:51:31 SCI-DIEBOLD4 charon-nm: 09[IKE] no trusted RSA public key found for 'vpn20-2.univ-fcomte.fr' <\/code><\/p>\n\n\n\n

Sur le serveur VPN nous avons cela :<\/p>\n\n\n\n

Mon, 2020-03-23 07:51:31 10[ENC] parsed INFORMATIONAL request 2 [ N(AUTH_FAILED) ]
Mon, 2020-03-23 07:51:31 10[ENC] generating INFORMATIONAL response 2 [ N(AUTH_FAILED) ]<\/p>\n\n\n\n

Pour corriger le probl\u00e8me et r\u00e9ussir \u00e0 \u00e9tablir la connexion, Cl\u00e9ment nous \u00e0 fourni la solution :<\/p>\n\n\n\n

dpkg-reconfigure ca-certificates<\/code>
(vous pouvez laisser tous les certificats coch\u00e9, sinon celui qui est imp\u00e9ratif est celui de Digicert)
update-ca-certificates<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"

Si votre syst\u00e8me (ubuntu 18.xx par exmple) n’est pas bien \u00e0 jour, il est possible que la cha\u00eene de certification qu’il embarque ne soit plus valide. Cela est visible sur certains serveurs Web en https certifi\u00e9s par Digicert, mais du coup aussi sur les serveur VPN vpn20-1 ou vpn20-2 qui utilise \u00e9galement ce type de […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[42,162,161],"class_list":["post-325","post","type-post","status-publish","format-standard","hentry","category-informations-utilisateurs","tag-certificat","tag-digicert","tag-vpn20"],"_links":{"self":[{"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/posts\/325","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=325"}],"version-history":[{"count":1,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/posts\/325\/revisions"}],"predecessor-version":[{"id":329,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/posts\/325\/revisions\/329"}],"wp:attachment":[{"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=325"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=325"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=325"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}